Privacy notice

Operator and contact

Bestivio operates this website from Georgia. For privacy questions or requests concerning your personal information, email contact@bestivio.com. Please do not send passwords, authentication codes or payment details.

Calculator inputs

The public budget calculator compares published plan prices in your browser. Its budget, currency and company-search inputs are not submitted to a calculation endpoint or saved by this control. Older model-specific calculation endpoints can receive model, settings and quantity selections. Do not put personal information or secrets in a URL; anyone receiving that link can read its parameters.

Staff sign-in

Staff accounts use Supabase authentication. Sign-in involves your email and password, and the application maintains the session with HTTP-only cookies. Staff access determines who can collect, review and publish data. Public calculator visitors do not need a staff account.

Research records

The administrative workflow stores source excerpts, review decisions, publication records and audit information. Collectors should redact personal information and credentials before saving evidence. Private evidence and account details are not part of the public calculator response.

Tracking and external services

The current application does not integrate advertising trackers or audience analytics. Application hosting and authentication providers can process request and security data. Following an external service link takes you to that provider's site and its own privacy practices.

Namecheap provides application hosting and email delivery, Supabase provides the application database and staff authentication, and Upstash Redis supports abuse prevention. Encrypted database backups use GitHub Actions and Cloudflare R2. These providers may process data outside Georgia. Private keys used to decrypt backup archives are kept separately from the backup storage.

Security and retention

Hosting systems can process IP addresses, request information and security logs to deliver and protect the website. Application rate limits use hashed identifiers with expiring counters. Security events can include a staff identifier, event type and timestamp and may generate an email alert.

The automated encrypted database backup workflow retains copies for 30 days. Staff account records, publication history, audit records and correspondence currently have no fixed automatic deletion schedule. We review removal requests individually; preserving source history, preventing abuse or meeting applicable obligations may require retaining some information. Deleting a live record does not immediately remove it from an existing backup.

Privacy requests and changes

Email contact@bestivio.com to request access to, correction of or deletion of personal information associated with you. Explain which information or interaction your request concerns. We may need to verify that the request relates to you before disclosing or changing private information. Rights and any limits depend on applicable law.

We update this notice when our processing changes. The date above identifies the current version.